Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/3130332e3235312e3138302e302f32322d3234203d3e203538383138.roa
File:                     3130332e3235312e3138302e302f32322d3234203d3e203538383138.roa (raw, json)
Hash identifier:          70D70n9xkXjxa6fbcdVhdkxLxFdRB3MS1UHRpvbBSe8=
Subject key identifier:   D6:5A:E4:76:E3:C2:C3:B5:C6:64:91:8C:93:7C:B6:F4:F3:B2:F1:6F
Certificate issuer:       /CN=6C11FF5474BE690E545132237E53030296585D32
Certificate serial:       587F93249410F264ED463F4891D083341D015D8A
Authority key identifier: 6C:11:FF:54:74:BE:69:0E:54:51:32:23:7E:53:03:02:96:58:5D:32
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/3130332e3235312e3138302e302f32322d3234203d3e203538383138.roa
Signing time:             Thu 29 Jun 2023 03:00:02 +0000
ROA not before:           Thu 29 Jun 2023 02:55:02 +0000
ROA not after:            Thu 27 Jun 2024 03:00:02 +0000
asID:                     58818
IP address blocks:        103.251.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.crl
                          rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 12:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:7f:93:24:94:10:f2:64:ed:46:3f:48:91:d0:83:34:1d:01:5d:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C11FF5474BE690E545132237E53030296585D32
        Validity
            Not Before: Jun 29 02:55:02 2023 GMT
            Not After : Jun 27 03:00:02 2024 GMT
        Subject: CN=D65AE476E3C2C3B5C664918C937CB6F4F3B2F16F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:fb:af:12:b2:1e:32:57:89:82:3b:9c:98:
                    75:d3:8b:0b:71:11:47:03:d3:86:b1:09:df:96:21:
                    23:e4:15:7e:65:7b:6f:c7:45:a5:03:1b:b6:ee:a5:
                    9c:c4:a1:70:69:3f:87:f2:5a:95:08:95:2d:3c:b7:
                    d9:bc:6d:70:ec:86:88:fe:52:91:3b:d6:c4:13:e4:
                    d7:6a:fc:57:c9:e6:92:cf:66:d0:1c:02:bf:2b:00:
                    b3:6e:5d:de:86:81:92:64:76:09:b0:4f:e1:15:6f:
                    53:05:43:4e:05:09:69:d3:41:c8:f5:eb:fe:d5:b2:
                    08:6b:eb:9d:1d:8e:ea:b9:6d:79:b1:71:f6:8f:f2:
                    1c:43:35:f8:41:f4:a5:c4:06:b6:42:11:3c:24:3b:
                    b0:b9:1d:65:1d:c3:c0:72:04:92:99:66:d6:68:2d:
                    b0:30:12:ae:54:52:cf:fa:fa:74:ab:fc:14:73:22:
                    34:52:e2:2a:c0:0e:9b:40:8b:0d:11:86:31:46:f1:
                    cd:b6:88:6f:78:4d:5d:89:b2:06:64:ce:04:b6:00:
                    23:b7:8e:a5:7b:87:e4:b5:43:70:9d:7e:99:c1:a9:
                    7f:ec:8c:81:15:9e:21:bc:34:5b:b9:d1:ee:d0:32:
                    e1:da:f5:af:9c:9a:84:c3:2b:99:20:d2:56:38:d7:
                    6d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:5A:E4:76:E3:C2:C3:B5:C6:64:91:8C:93:7C:B6:F4:F3:B2:F1:6F
            X509v3 Authority Key Identifier:
                keyid:6C:11:FF:54:74:BE:69:0E:54:51:32:23:7E:53:03:02:96:58:5D:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/6C11FF5474BE690E545132237E53030296585D32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C11FF5474BE690E545132237E53030296585D32.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e33a9ef-5b5f-4429-834b-95b2b73680e6/0/3130332e3235312e3138302e302f32322d3234203d3e203538383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:5c:43:e3:26:fb:d5:8f:e3:c0:e5:f9:93:80:4d:33:d8:36:
         be:e3:32:53:bf:42:8d:15:80:83:10:36:ff:05:36:c7:73:ff:
         1a:33:ee:7c:b2:08:ca:e8:93:9c:b9:cd:57:9f:9c:d8:c1:d4:
         66:59:f6:3f:33:35:d3:26:30:3e:2f:eb:35:33:5e:c6:8e:b7:
         de:8a:4c:2f:58:44:58:c9:47:85:1e:d6:d4:05:b7:29:b6:61:
         91:ea:9b:7b:3f:a1:d4:53:5a:86:2b:5b:9d:e8:81:fd:37:fc:
         0e:03:1a:8f:1f:b0:14:ab:c1:d8:ba:71:2b:09:31:cc:da:c0:
         3f:19:e7:63:47:03:7c:2c:13:cb:cc:00:8a:d9:4d:f8:b2:3b:
         9d:80:d3:c6:18:eb:c1:42:b8:33:19:5a:44:8a:09:c8:ee:62:
         62:f4:ce:ea:fe:79:03:95:d6:2f:89:02:2b:25:13:0a:39:17:
         3d:d9:eb:25:0c:3d:52:80:d3:cd:e0:c4:f6:e6:10:50:4b:16:
         d4:a2:fa:ea:71:9e:75:0e:c3:31:e7:a5:81:2b:e5:82:25:ad:
         75:ea:d7:35:5a:e6:03:47:ed:46:02:b1:ea:83:54:8f:60:fd:
         fc:c8:da:ee:2d:ce:10:bf:c6:8e:15:ee:15:da:ca:8a:cd:99:
         20:e8:5e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:28:45 2024 by rpki-client on console-ams.rpki-client.org